CVE-2006-3323

HIGH 7.5CVE-2006-3323 · Published 30/06/2006 · updated 16/06/2026

In short

CVE-2006-3323 is a HIGH (CVSS 7.5) vulnerability affecting mf piadas (mastersfusion).
Chance of exploitation in the next 30 days (EPSS): 7.8%, higher than 94.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mf piadas mastersfusion	`= 1.0`	No fix yet

Description

PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script.

References

kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html · Exploit
secunia.com/advisories/20847 · Vendor Advisory
securityreason.com/securityalert/1172
osvdb.org/26867
osvdb.org/26868
securityfocus.com/archive/1/438496/100/0/threaded
securityfocus.com/bid/18676 · Exploit
securityfocus.com/bid/18679 · Exploit
vupen.com/english/advisories/2006/2567
exchange.xforce.ibmcloud.com/vulnerabilities/27412
exchange.xforce.ibmcloud.com/vulnerabilities/27415

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free